Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/VzyrotjpXiB3QsBnwbY0AotWSVA.roa
File: VzyrotjpXiB3QsBnwbY0AotWSVA.roa (raw, json)
Hash identifier: rot/vBnhUmnjcyxMqY7LAQsnfK8Y2VjZcW5SpcmilGY=
Subject key identifier: 57:3C:AB:A2:D8:E9:5E:20:77:42:C0:67:C1:B6:34:02:8B:56:49:50
Certificate issuer: /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial: 01981945DC7E106E2F26DF22ACDDC8F6AF8B
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/VzyrotjpXiB3QsBnwbY0AotWSVA.roa
Signing time: Thu 17 Jul 2025 16:44:25 +0000
ROA not before: Thu 17 Jul 2025 16:44:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 194.179.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 06:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:19:45:dc:7e:10:6e:2f:26:df:22:ac:dd:c8:f6:af:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Validity
Not Before: Jul 17 16:44:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=573caba2d8e95e207742c067c1b634028b564950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0f:1a:6e:0a:3d:de:51:7b:b8:3c:68:d1:88:
aa:27:64:3b:7b:a2:16:d1:da:a5:6a:75:1a:98:a4:
89:33:13:75:ba:fc:88:29:58:99:97:80:51:9d:9d:
ab:36:b2:26:60:0c:ad:68:ea:c1:86:8f:1b:e0:e9:
db:3f:15:27:e9:f7:81:c9:03:aa:f7:ad:ad:96:59:
9d:f8:03:bc:7a:d9:94:38:34:76:04:c4:89:09:73:
76:0d:18:26:1c:c4:b3:e3:e2:12:1f:13:a4:1a:63:
92:c6:12:36:ce:bb:b9:17:4c:39:02:fa:e0:83:9e:
d0:3c:23:9b:06:54:a9:bc:c6:89:89:50:58:84:14:
ee:a6:98:0c:ba:c7:a9:a9:8e:4c:52:89:76:1b:d7:
cb:dd:41:ba:1c:51:54:8a:5a:99:70:29:02:82:98:
63:49:8b:65:3c:11:93:1b:06:39:b8:69:df:ef:e6:
78:9b:3a:52:fb:a4:d0:69:f2:46:59:95:ec:55:58:
95:1a:1f:af:80:28:0a:60:11:93:9c:1f:61:14:1e:
cd:44:b7:ea:73:eb:c0:e6:b8:1f:05:bd:65:d2:ff:
c9:2c:6b:78:60:dd:96:7d:31:ce:cc:7d:a2:2b:0c:
e7:56:2c:8f:29:8c:8e:d5:18:c2:40:41:3e:3d:89:
26:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3C:AB:A2:D8:E9:5E:20:77:42:C0:67:C1:B6:34:02:8B:56:49:50
X509v3 Authority Key Identifier:
keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/VzyrotjpXiB3QsBnwbY0AotWSVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.179.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:24:86:53:62:45:df:e1:cc:9b:f6:93:4c:7d:26:91:5e:25:
0e:65:3e:f9:8e:69:dc:56:05:11:87:c8:23:d7:9d:b5:7b:9c:
7b:67:48:95:bc:c2:23:ea:dd:00:4a:14:82:4d:7f:9d:a0:85:
22:cb:21:d8:7c:60:b7:9f:47:8f:38:4d:0c:29:b2:a6:fc:c9:
2a:f1:82:9d:70:c5:be:73:5d:49:14:2b:f2:1a:15:12:8d:f1:
1c:b7:d2:77:13:f7:87:77:77:ca:28:7d:a4:cd:98:22:83:e2:
0c:e4:b5:b5:d4:9e:48:6a:06:dc:b6:fc:f8:90:b4:18:33:e1:
ba:0e:6a:d9:3a:a6:09:34:dd:59:20:f9:50:6e:55:aa:1a:81:
07:8e:0b:ac:29:2b:1b:ee:a9:a7:1e:29:99:17:f9:9c:7e:0e:
ec:ce:b8:ba:8e:78:16:4a:9d:b1:78:c6:5f:71:b2:d3:f2:d1:
50:d3:c2:7a:6a:66:08:83:1f:d8:97:c4:41:27:ad:b9:1f:da:
ed:15:eb:d0:0f:45:b2:ba:5d:cb:ef:40:16:07:66:6a:b3:c0:
a2:7f:9d:58:6e:88:e4:e8:b4:ab:ad:be:df:73:8c:c8:fa:f5:
50:b0:0d:43:ae:dd:17:c4:c3:6a:68:02:53:c8:ad:69:fc:e9:
70:bf:46:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 15:03:43 2025 by rpki-client